From b1350bee28a06333f404b7717de745f208f3d20b Mon Sep 17 00:00:00 2001 From: Stephan Renatus Date: Mon, 19 Jun 2017 11:51:36 +0200 Subject: [PATCH 1/3] RELEASE_NOTES: release 12.15.8 Signed-off-by: Stephan Renatus --- RELEASE_NOTES.md | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 66ac5be6a8..cdc62c0255 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -11,14 +11,26 @@ For prior releases, see [PRIOR\_RELEASE\_NOTES.md](PRIOR_RELEASE_NOTES.md). * [Stricter validation of non-functional user record fields](https://github.com/chef/chef-server/pull/1294), Chef Server now uses a regular expression to validate first, middle, and last name of a user - on creation. The regex used is `[[:word:][:digit:]!'. -]+` (UTF-8). This tries to accomodate + on creation. The regex used is `[[:word:][:digit:]!'. -]*` (UTF-8). This tries to accomodate a wide range of names, while also strengthening Chef Server's role in preventing XSS attacks - in web-based API clients. + in web-based API clients. For compatibility reasons, a user's first, middle, or last name may + also be `""` (empty string). * [Search user by email case-insensitively](https://github.com/chef/chef-server/pull/1283): while technically only the host-part of an email address is to be treated case-insensitively, most email providers treat the _entire_ email address as case-insensitive. Chef Server now adopts that behaviour for _searching users_: querying for `user@host` (`GET /users?email=user%40host`) will now also return users with the recorded email of `USER@HOST` etc. +* API requests including an _unknown group_ now return 404 instead of 500 ([#1286](https://github.com/chef/chef-server/pull/1286)) +* `opscode-erchef` now allows for configuring an optional ulimit via `opscode_erchef['memory_maxbytes']` ([#1279](https://github.com/chef/chef-server/pull/1279)). + +* Fixed [regression](https://github.com/chef/chef-server/pull/1305) where credentials consumed + by Analytics would be left plainly on disk after the `insecure_addon_compat` option was set to `false`. +* Fixed [regression](https://github.com/chef/chef-server/issues/1281) where parts of the available data + (e.g. cookbook upload events) weren't sent to Chef Automate with the proper data collector token. + +### Security Updates + +* [Upgrade zlib to 1.2.11](https://github.com/chef/chef-server/pull/1311): this addresses [CVE-2016-9841](https://nvd.nist.gov/vuln/detail/CVE-2016-9841), [CVE-2016-9842](https://nvd.nist.gov/vuln/detail/CVE-2016-9842), and [CVE-2016-9843](https://nvd.nist.gov/vuln/detail/CVE-2016-9843). ## 12.15.7 (2017-05-16) From 4361e7278dc754c964825d68c66f0a3b2bba1d4f Mon Sep 17 00:00:00 2001 From: Davida Marion Date: Mon, 19 Jun 2017 14:52:01 -0700 Subject: [PATCH 2/3] CHANGELOG: release 12.15.8 Signed-off-by: Davida Marion --- CHANGELOG.md | 43 +++++++++++++++++++++++++++++++++++++++++++ RELEASE_NOTES.md | 4 ++-- 2 files changed, 45 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f3118c7581..46c2d21fdf 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,48 @@ # Chef Server Changelog +## [#](https://github.com/chef/chef-server/tree/#) (2017-06-20) +[Full Changelog](https://github.com/chef/chef-server/compare/12.15.8...#) + +**Fixed bugs:** + +- not\_found\_message for "groups" undefined, returns HTTP 500 instead of 404 [\#1284](https://github.com/chef/chef-server/issues/1284) +- Support Self-Service Org Deletion [\#48](https://github.com/chef/chef-server/issues/48) + +**Closed issues:** + +- Wrong token used by Chef server to send data to Chef Automate [\#1281](https://github.com/chef/chef-server/issues/1281) +- Fresh server install on Jessie fails during client run - exception handlers [\#1178](https://github.com/chef/chef-server/issues/1178) + +**Merged pull requests:** + +- Bump omnibus-software pin [\#1311](https://github.com/chef/chef-server/pull/1311) ([srenatus](https://github.com/srenatus)) +- \[CON-689\] issue 1308 Elasticsearch 5 Support Will Break External Solr [\#1309](https://github.com/chef/chef-server/pull/1309) ([lancewf](https://github.com/lancewf)) +- Update RELEASE\_PROCESS.md and CODE\_REVIEW\_CHECKLIST.md [\#1306](https://github.com/chef/chef-server/pull/1306) ([srenatus](https://github.com/srenatus)) +- Remove analytics plain text secrets when insecure\_addon\_compat false [\#1305](https://github.com/chef/chef-server/pull/1305) ([srenatus](https://github.com/srenatus)) +- Add tests for chef-server-running.json [\#1304](https://github.com/chef/chef-server/pull/1304) ([stevendanna](https://github.com/stevendanna)) +- \[POOL-589\] Allow user creation with blank middle name. [\#1303](https://github.com/chef/chef-server/pull/1303) ([stevendanna](https://github.com/stevendanna)) +- \[pedant\] Paginate search results [\#1301](https://github.com/chef/chef-server/pull/1301) ([srenatus](https://github.com/srenatus)) +- Lazily evaluate ES version detection code [\#1300](https://github.com/chef/chef-server/pull/1300) ([stevendanna](https://github.com/stevendanna)) +- Fix keys for validating name fields [\#1299](https://github.com/chef/chef-server/pull/1299) ([srenatus](https://github.com/srenatus)) +- \[pedant\] Add sleep to re-indexing tests [\#1298](https://github.com/chef/chef-server/pull/1298) ([stevendanna](https://github.com/stevendanna)) +- \[cookbooks\] Removed unused cookbook cache config option [\#1297](https://github.com/chef/chef-server/pull/1297) ([stevendanna](https://github.com/stevendanna)) +- Fix test failures caused by UTF8-data and multiple email addresses [\#1296](https://github.com/chef/chef-server/pull/1296) ([stevendanna](https://github.com/stevendanna)) +- \[cookbooks\] Remove apt and yum dependencies [\#1295](https://github.com/chef/chef-server/pull/1295) ([stevendanna](https://github.com/stevendanna)) +- \[POOL-589\] Add regexp for {first, middle, last, display}name [\#1294](https://github.com/chef/chef-server/pull/1294) ([srenatus](https://github.com/srenatus)) +- Fix `omnibus cache missing` etc [\#1293](https://github.com/chef/chef-server/pull/1293) ([srenatus](https://github.com/srenatus)) +- Upgrade PostgreSQL to 9.2.21 [\#1292](https://github.com/chef/chef-server/pull/1292) ([rhass](https://github.com/rhass)) +- Elvis for oc\_erchef, oc\_bifrost, and bookshelf [\#1290](https://github.com/chef/chef-server/pull/1290) ([srenatus](https://github.com/srenatus)) +- \[POOL-606\] oc-chef-pedant: improve oc\_id API test coverage [\#1289](https://github.com/chef/chef-server/pull/1289) ([srenatus](https://github.com/srenatus)) +- CON-638 Experimental developer support for external ES5 [\#1287](https://github.com/chef/chef-server/pull/1287) ([lancewf](https://github.com/lancewf)) +- Fix 1284: 500 returned instead of 404 for unknown groups. [\#1286](https://github.com/chef/chef-server/pull/1286) ([codeadict](https://github.com/codeadict)) +- Run chef-zero integration tests using master [\#1285](https://github.com/chef/chef-server/pull/1285) ([stevendanna](https://github.com/stevendanna)) +- \[POOL-608\] allow for case insensitive users search by email [\#1283](https://github.com/chef/chef-server/pull/1283) ([srenatus](https://github.com/srenatus)) +- Convert data collector token when returned by chef\_secrets [\#1282](https://github.com/chef/chef-server/pull/1282) ([srenatus](https://github.com/srenatus)) +- Add optional ulimit for erchef [\#1279](https://github.com/chef/chef-server/pull/1279) ([danielsdeleo](https://github.com/danielsdeleo)) +- \[CLOUD-371\] Allow oc-chef-pedant chef\_server URL to be configurable [\#1278](https://github.com/chef/chef-server/pull/1278) ([ryancragun](https://github.com/ryancragun)) +- Pin berkshelf-no-depselector to avoid pulling in 6.0 [\#1277](https://github.com/chef/chef-server/pull/1277) ([stevendanna](https://github.com/stevendanna)) +- Add a CODE\_REVIEW\_CHECKLIST.md [\#1273](https://github.com/chef/chef-server/pull/1273) ([stevendanna](https://github.com/stevendanna)) + ## [12.15.7](https://github.com/chef/chef-server/tree/12.15.7) (2017-05-17) [Full Changelog](https://github.com/chef/chef-server/compare/12.15.6...12.15.7) diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index cdc62c0255..b2c3641771 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -7,11 +7,11 @@ in the release. For a detailed list of changed components, refer to This document contains release notes for the current major release and all patches. For prior releases, see [PRIOR\_RELEASE\_NOTES.md](PRIOR_RELEASE_NOTES.md). -## 12.15.X (TBD) +## 12.15.8 (2017-06-20) * [Stricter validation of non-functional user record fields](https://github.com/chef/chef-server/pull/1294), Chef Server now uses a regular expression to validate first, middle, and last name of a user - on creation. The regex used is `[[:word:][:digit:]!'. -]*` (UTF-8). This tries to accomodate + on creation. The regex used is `[[:word:][:digit:]!'. -]*` (UTF-8). This tries to accommodate a wide range of names, while also strengthening Chef Server's role in preventing XSS attacks in web-based API clients. For compatibility reasons, a user's first, middle, or last name may also be `""` (empty string). From bc20a7c52d74fab059f9f77839aad7666c21a69d Mon Sep 17 00:00:00 2001 From: Stephan Renatus Date: Tue, 20 Jun 2017 08:37:19 +0200 Subject: [PATCH 3/3] build version: 12.15.8 Signed-off-by: Stephan Renatus --- CHANGELOG.md | 4 ++-- omnibus_overrides.rb | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 46c2d21fdf..0670c28fb8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,7 @@ # Chef Server Changelog -## [#](https://github.com/chef/chef-server/tree/#) (2017-06-20) -[Full Changelog](https://github.com/chef/chef-server/compare/12.15.8...#) +## [12.15.8](https://github.com/chef/chef-server/tree/12.15.8) (2017-06-20) +[Full Changelog](https://github.com/chef/chef-server/compare/12.15.7...12.15.8) **Fixed bugs:** diff --git a/omnibus_overrides.rb b/omnibus_overrides.rb index b83dc98f06..56028fb5df 100644 --- a/omnibus_overrides.rb +++ b/omnibus_overrides.rb @@ -1,4 +1,4 @@ -build_version "12.15.7" +build_version "12.15.8" build_iteration 1 override :erlang, version: "18.3"